Enhance real-time file system integrity checking 7.0.15
In this enhancement, a hash of all executable binary files and shared libraries are taken during image build time. The file containing these hashes, called the executable hash, is also hashed. This new hash is signed together with other important files like the FortiOS firmware, AV and IPS engine files. This hash will follow the BIOS-level signature and integrity check during the boot process, to prevent any unauthorized changes from being loaded.
For more information about this feature, see Enhance real-time file system integrity checking.